SAUTI WORKSPACE
API keys
Create scoped keys for your server-side applications.
Connecting to workspace Showing sample records. Start the API to manage real workspace data.CONNECTING
Secrets are shown once. Bonga stores only a keyed digest. Put each key in your server environment, never in a browser or mobile app.
| Key | Environment | Permissions | Created | Last used | Status | |
|---|---|---|---|---|---|---|
Production backendsk_live_8YtR•••••••• | LIVE | agents:readspeak:invokelisten:invoke | Oct 18, 12:00 AM | 2 min ago | active | |
Staging appsk_test_4pLk•••••••• | TEST | agents:readtalk:invokespeak:invoke+1 | Oct 12, 12:00 AM | Yesterday | active |
Safe key handling
Keep all API credentials out of client applications.
Server-side env varRecommended
One-time displayEnabled
Prefix on listMasked
Least privilege
Make one key per app and environment.
A key with only speak:invoke cannot call Talk or Listen. Use agent grants when an app should access only one profile.